2 Days
Source:
بوابة الفجر
_1777352142843_145525226.png&w=64&q=75){kind=small}
Source: بوابة الفجر
2 Daysبوابة الفجر
Source: بوابة الفجر
2 DaysReady to play
Ready to play
Kaspersky said ransomware attacks on ESXi and Proxmox environments did not breach the hypervisor itself. Instead, they exploited weak administrative controls and exposed credentials, including shared root passwords or passwords stored on compromised workstations. The findings were based on the BlackNevas group’s attack on ESXi in October 2025 and The Gentlemen group’s attack on Proxmox in August 2026. In both cases, access to monitoring and management systems enabled the attackers to encrypt virtual servers. Kaspersky recommended isolating management networks, restricting account privileges, avoiding credential reuse or storing credentials in exposed locations, and strengthening monitoring of systems and access paths to servers.
Notice: This Is an AI-Generated Summary
Comments (0)